外刊阅读 | 科学快讯 | 网络安全中最大的漏洞就是你自己

文摘   2024-10-29 07:31   四川  
扫码加关注  
精彩文章读不停   

  

星标我,不迷路!


上期答案



The road to success is seldom smooth.

通往成功之路很少是平坦的。

本期内容



导读

早上好,读者朋友们,今天分享的文章选自《科学快讯》。在数字时代,网络已成为我们生活、工作和学习中不可或缺的一部分。然而,随着互联网的深入普及,网络安全问题也日益凸显,成为笼罩在现代社会上空的一片阴霾。你可能已经安装了最先进的防火墙,使用了复杂的密码,甚至购买了昂贵的网络安全软件,但你是否知道,真正的安全隐患可能并不在外部,而恰恰隐藏在你自身?是的,你没听错!在网络安全这场没有硝烟的战争中,你,自己,可能就是那个最大的漏洞。人的因素,尤其是人的行为习惯和心理弱点,往往成为黑客攻击和病毒传播的突破口。一个简单的点击,一个不经意的泄露,就可能让精心构建的安全防线瞬间崩塌。


The Single Biggest Vulnerability in Your Cyber Security Is You

网络安全中最大的漏洞就是你自己

1







Despite huge advances in cyber security, one weakness continues to overshadow all others: human error.Research has consistently shown human error is responsible for an overwhelming majority of successful cyber attacks. A recent report puts the figure at 68%.



cyber /ˈsaɪbər/ adj. (与)网络有关的

amnesia  /æmˈniːʒə/ n. 健忘症


点击下方查看翻译

对大多数人而言,难以想象没有语言的生活;我们的内心世界充斥着这些仿佛与实物一般的纯粹虚拟之物。几乎所有人都是在孩提时代学会第一门语言,且对那段记忆已无从追溯;儿童期健忘症通常在四岁左右减退,而到了这个年龄,孩子们通常已经能说得相当流利了。少数成年后才学习母语的人的记录表明,他们的生活被一条分界线划分为两个完全不同的部分。


 


No matter how advanced our technological defences become, the human element is likely to remain the weakest link in the cyber security chain.This weakness affects everyone using digital devices, yet traditional cyber education and awareness programs – and even new, forward-looking laws – fail to adequately address it.So, how can we deal with human-centric cyber security related challenges? There are two types of human error in the context of cyber security.The first is skills-based errors. These occur when people are doing routine things – especially when their attention is divertedFor example, you might forget to back up desktop data from your computer. You know you should do it and know how to do it (because you have done it before).



forward-looking  adj. 有远见的

divert /daɪˈvɜːrt/ v.使分心

back up  备份


点击下方查看翻译


无论我们的技术防护手段变得多么先进,人为因素很可能仍然是网络安全链中最薄弱的环节。这一弱点影响到每一位使用数字设备的人,然而,传统的网络安全教育和宣传项目,甚至是那些具有前瞻性的新法律,都未能有效解决这一问题。那么,我们该如何应对以人为中心的网络安全相关挑战呢?在网络安全领域,人为错误有两种类型。第一种是基于技能的错误。这类错误通常发生在人们执行日常任务时,尤其是当他们注意力分散时。例如,你可能会忘记备份电脑桌面上的数据。你知道应该这么做,也知道怎么做(因为你以前做过)。





But because you need to get home early, forgot when you did it last or had lots of emails to respond to, you don't. This may make you more exposed to a hacker's demands in the event of a cyber attack, as there are no alternatives to retrieve the original data.The second type is knowledge-based errors. These occur when someone with less experience makes cyber security mistakes because they lack important knowledge or don't follow specific rules.For example, you might click on a link in an email from an unknown contact, even if you don't know what will happen. This could lead to you being hacked and losing your money and data, as the link might contain dangerous malware.



retrieve /rɪˈtriːv/ v. 找回,收回

malware /ˈmælwer/  n. 恶意软件



点击下方查看翻译


但是,由于你需要早点回家、忘记了上次备份是什么时候或者有很多邮件需要回复,你最终没有备份。在网络攻击发生时,由于没有其他方法可以恢复原始数据,你可能会更容易受到黑客的要挟。第二种是基于知识的错误。这类错误通常发生在经验较少的人身上,因为他们缺乏重要的知识或者没有遵循特定的规则而犯下网络安全错误。例如,你可能会点击来自未知联系人邮件中的链接,即使你不知道点击后会发生什么。这可能会导致你遭受黑客攻击,从而损失金钱和数据,因为这个链接可能包含危险的恶意软件。





Organisations and governments have invested heavily in cyber security education programs to address human error. However, these programs have had mixed results at best.This is partly because many programs take a technology-centric, one-size-fits-all approach. They often focus on specific technical aspects, such as improving password hygiene or implementing multi-factor authentication.Yet, they don't address the underlying psychological and behavioural issues that influence people's actions.



mix results at best  好坏参半

psychological /ˌsaɪkəˈlɑːdʒɪk(ə)l/  adj. 心理的


点击下方查看翻译


各组织和政府已投入大量资金开展网络安全教育计划,以解决人为失误问题。然而,这些计划的成果好坏参半。部分原因是许多计划都采取以技术为中心、一刀切的做法。它们通常侧重于特定的技术方面,例如改善密码卫生或实施多因素身份验证。然而,它们并没有解决影响人们行为的根本心理和行为问题。





The reality is that changing human behaviour is far more complex than simply providing information or mandating certain practices. This is especially true in the context of cyber security.Public health campaigns such as the "Slip, Slop, Slap" sun safety initiative in Australia and New Zealand illustrate what works.Since this campaign started four decades ago, melanoma cases in both countries have fallen significantly. Behavioural change requires ongoing investment into promoting awareness.The same principle applies to cyber security education. Just because people know best practices doesn't mean they will consistently apply them – especially when faced with competing priorities or time pressures.



melanoma /ˌmeləˈnoʊmə/ n. (肿瘤)黑素瘤

ongoing /ˈɑːnɡoʊɪŋ/ adj. 持续存在的


点击下方查看翻译


现实情况是,改变人类行为远比简单地提供信息或强制执行某些做法要复杂得多。在网络安全方面尤其如此。澳大利亚和新西兰的“滑、泼、拍”防晒倡议等公共卫生运动就证明了这种方法是有效的。自四十年前发起这项活动以来,两国的黑色素瘤病例已大幅下降。行为改变需要持续投资以提高认识。网络安全教育同样适用这一原则。仅仅因为人们了解最佳实践,并不意味着他们就会始终如一地去应用这些实践——尤其是在面临各种优先级冲突或时间压力时。


Journal:sciencealert

Title:The Single Biggest Vulnerability in Your Cyber Security Is You(October 24, 2024)

Category:TECH and Cyber Security


END





写作句式积累

However, these programs have had mixed results at best.

然而,这些项目的成果好坏参半。





翻译练习

The strength of our digital defenses lies not just in firewalls and algorithms but in the collective awareness and action of every digital citizen.






翻译练习,欢迎大家文末留言打卡,下期推送文章公布答案哟,一起阅外刊学英语吧!

获取完整版PDF及音频文件:

网盘链接(无提取码):https://pan.quark.cn/s/e79e82d75f49


点击下方链接查看往期文章 ↓ ↓ ↓记得点关注哟

扫码关注我的视频号

 



分享

收藏

点赞

在看

分享,收藏,点赞与在看,至少我要拥有一个吧↓↓↓

阅外刊学英语
本订阅号定期更新英语外刊,助您提升英语阅读能力!精心挑选卫报、大西洋月刊、经济学人、新闻周刊、麻神理工技术评论等热门外刊文章,涵盖新闻、科技、文化、时尚、生活多个领域。无论您的英语水平,我们都有适合的内容。快来和我们一起开启英语学习之旅吧!
 最新文章